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A(S)) LQ0){(K(wRi r ;M/l [cafppilEi>(ta11flfr&n 1Sv-arch Warram 

IiMEIBDsS lSlLRtC (tdSedJ Rl 

felrlheie 

§ 0 Utih'eit h) i EUUst i? i GtCOCjfi UGe o r gia 


ta lbti^VkafettledfibetSearsfeaefh of , 

be searched! 

oft itL'nitiftclitn/ fBhHjnpfejr®sme loqtl ri'f/ffe'.r.&hd address) j 

195? tmtTfUE fiSW. AUfiliSXA, QA 36104; ) 

AySHTceaLQRMJ6SAU6iUE6iWITHVIN ) 

JM8AZ2KR0ef25447®^r^rfhei^qsteaf^EAblF(felE6li3ttWlt 1 H)jea winner 


Ga<Si&|>. ^(tnMj'2.4 


K(MAAdslkiM<Silit WARRANT 

tt a factor HhwadndJic gove*m Oiit n^ Msi st a search 

p^iM^u^’psigu^tfa^bb^vtehraasoD thi^yevtffetfaabsMi the IbSavie^Kthiaitorqn'op&r^ r /ftM/fo wtn<g$op @r <&aw*7Ae ^ p r o p e r t y (ids 

pKtq$mtct 3/p lk f os t if©'!&Warif afsi (knytiw ®/'its location) : 

See Mtaetaiifird A, 

kiciMcddi 11ih£he §&U*ttefR hlkidtiiTf &g©K#aa , ttha’gris 4Qwriamceakd^d/aj@^Mdendfyihe 

petts&awr®fc.\di®i&ci!i&ty&(>f±d }$\ 1 pfchtp&Mliyf )1 o be seized) 


See Ay sfimenteB 


fM fei&iilbf the KVmcbamf&Sr fedefct fifAm.A 1 , -HffijhtS B hetAmp&Y mQVhl heck one or more): 

Sfi'fidewdfflteKiiiiieb: of a crime; 

A'iiindQinititoaib^maiT;!:, (f-ritidi-1nQns(iif'»;i(B_r[imes^cdor other items illegally posse 

vf" piB^Ssttp s tia silgtht <3 s t£,d b t Qlteb d Is h ti feh d® di s fd ±n y e I4t i n ictJfi1 tj a mi nth committing a crime; 
hi a [ipeea to bet a>rrfc^e4©rt& ptisan svihoas pelfl&ii'liill.VhJsn'abicdnlawfully restrained. 

Mtc S&iJithiiifbkaedttecOhioklt«Hjation of; 

fcl'itt/r defiribn O^teMS&ldBes/jflfdy^tion 

IS U.S.G..S®diaR)Z9&3 S^tti»ii^(J;ari^iifeJigL®itlic^ri&£)af6Baai^forffi^kBte information 


the a^p^idJjsatifolwsid (Wte® tkststhese facts : 
See <M sated aftS ids v if.. 


sfe COotntnidiaietfiic oitncbtifeshatBt ached sheet. 

D Delayed notice of days(4giweua.a(aat[eholir4idate[if;morhithil130-days: ) iisrtequestdd 

under l£8UU6SCC§ §1 GlQShKthehasife oliwttiidh issetnfrorth da' theiaktaithddfSheet. 

. f/I'pptioan U ss,ignatwre 

Justin C. (E0Bnrridk,S^pe(3al f VSprtt,FBBI 

Primed'nfemsfaud Kite/ title 


Sworn to Ibdforcnraeiiahdjsipjleto (nyrPFf 911 ® 9 ® 1106 - 

tte: mt&wm-] 7 

City and state: Augusta, Saorgia 



f>iim*ti'n4ffiBfaBditia®/ title 


/ 
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ATTACHMENT A 

l Pra/piftyttp fetivdoec/a-Warched 

The ppereisestebetseacdiestAS&TifiaulaBew. 6<A?309fl^iife&tttheGies»i4)@d . is further desc 

a&aataadsftkaK&r)oa^tor^ite>«se,d©§ated)nei8-,the(ijjJaitseaioitatBailtte H®MgaBd4¥aHvenStr£etBattle Row and Wa 
tods aje4biaekih0uaet*ith(aisb«igfet®Dfa'SieimgtibersdSn actheisihlcnlOBibe cesstenae:.cTbesible on the resi 
froohdoordseoiered Iwrar&cin tgoreh .front porch. 

ThevebkktO^(tseai^eddBadj^-c0toredM^n<awbiccwBibiVtlsbsan Cube with vin 
IN co^egis^ted;terRBAiLi'l'f?'EM J K3fd WiNfeffiRi inner. 

The ppESOBda be searched isid£RMdTy iREfOiHiWINNEffe \wli(N»ffiJR\vhita(femaleaviithiite female with 
btofldahaifaacd tduieie3oasu5‘^itayvweighing:a(ii3rpxt*aai^'iW# Qeasnjhemnds, with dob Dec 

4 , \mi. 
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ATI'MMiVlENT B 

Pr&jp&tyltp Iti'cseiizeds e i z e d 

II. MlidaamaeiasitMdaif€fioii^cEeldtHigrtaL*ioJatioitSDoFdl(8iytS>Cm^ 8 u.s.c. § 793, 

iftv<^ttgi{^AkHM l£IC&i(WrNMEfi^daOciucri^a&QirJiinaaiiyeb, 2M3pkteiudiBg:20i3, including: 

a. . Gassifieddnatesiaisriai; 

b. . Amy l4.SsGos , eKnfttcM«niatcriaikeriai: 

e.. Con^tstbyanynaeaptsmwkhdpreigrtgoNfiBdrDBifigts.|ore^nnpcavers„orforeign powers, or 

agMrttef foreigfl4ioAvers;powe r s; 

d.. Cent^tSibyanyrae^nsn^dteiricdiaiciiMlQtiKdia outlets: 

InfcfframttetoiumUidingcclanitiiiraiigcal^ regarding the 

^Me\^,vaQr^getQr4fi^rnissioaMs^llmicm:lasSiliethB(1fiteti^ or classified material; 

£. Reeardsi©ftrfivdrmi^ii4ingflal£ticliaimgtra«d4iicbetsg5ecetpisi«afiidtickets, receipts, anc 

phfilOgt£pb$hs ; 

g. . brf©cnaatidinLDagaEtyggnades(g-aflrh<tedo®btaini9Ddeli¥erdaeDatiiKeor deliver sensitive 

iiftfffimatfooiajKl/oiabiaytQravitMdfOtevadcdctectifimfeyMelligefteeGcrflictalSoQr Intelligence officials 
enforeeiafiBh authorities 3. t i e s ,- 

h. . FihaacialiJ$aords,do<rtddingibaaki3tMemiertlaialEccatmitn&HnaiB>n aardcount information , 

Eeeocdsjffifany' Iftc^ddrtfartsaelioit;ransaction; 

ti.. Wc&rnaHafcidcvantetb®UH«ilivctfor tbemUbiisepsufibas taitBgcrv&fiBTOatt, such as anti- 
stiatetr®nfenpK)pagaflidpaJ^^addi, aimtsudH:ita(li©nsaarci)ffeisLti)aeiigagEijaiaati€goverfifiHajB to engage in i 
or un law ful aetwitiesi e s . 

2.. Comiputmorstorago media usediis auueahsde cemmiittae tiolatiorisitesdrftedviolations descril 
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above. 

3.. Foitait^i^oraptttpciefeaorageaBediHgtevvjfieseLSfir/.wred&ethe&ibesathMizedfe^rwise authorized b 
thiisyarraahand^n^ieoinp^erm^jaiernediiTOdtea^nteinJSimniAMtehdSjRtOEfiidirecQiidsiQt which is stored 
iinfomsationittot bmthcnvds&eailedvibe by Ibis ivarrani f herpimatteri einatter, 

a. , exadeneeiolwho used, owned, eneeatroded theiCQMPM I'EReaiatbsa iraeIheit the time the 

thittgis^4esflBbed:ift)Ais ftarrahtwerfeoreated, etdled, etdeJeted, siejfeiasddgs.or deleted, such as 
tEegjst^teptrieSitc0flfignrati©nrfi]gsi]sav'fl£bttsefttaree^aiKkpiBaw®fi(tefjd@©ttffleated passwords, docu 
bnosv&iiigibistairjftttsefprafites; ^naili:ii^l,c(Hitatas,,‘‘cb#fe’iiinstaBiin»ss^ingchat," instant me 
tOg3,5phqiQgrapbs,5Epri eprrespD Often e^s pondeneei 

b. . e\ydcaea<of softwarettbat wouldta Ik»« irth©ffiitoxamr®lrtbetGQMPdiEE Ri isttekaseuTE r, 

vituaese'itojan:bdKfis,iandatfber forms o£irraJicfiaisiiS0ftoaret}5asivfilba&e\gld®tceare, as well as 
ofthetitfeifiirKe^fiabseneesjfseaufayiseftwaDEudesdgneddetdetofitnwdKk^rsed to detect maiicio 
softwares,- 

e_ evidenee©ftbctlaek]!>f:SiJC:h;iTiaJkii()nsiaaliware£oftvjare: 

d. . c^MejtefidtMiieatblg;baWiafdrtV)benaftK! comfMfflttsafcacepssedior^ttsed fetcessed or used to 

deJesniiiietlbeehroriolQgjeaJloogfextofcomputet aexffiss,diispuaifo:c\teniS;Hdatirigse. and events re 
ta)crimert*adorifo¥estigaft©fltatid^eifoncomputetusert computer user; 

e. .evddeMeimycalMi<gJhfeeamButetiasec , (Srstai(t©ttriiiiittfe^>'iferdalas:totbecmiiriecund§r it relates to 

investigat font ion; 

£. ev/idaneenafthe att&diraerafetolthfeCOMPUlHsR ©tether storage debtees ortsimtl§fe devices or sim 
eonhanersifor etecttoatetevideBcet i den ce ,- 
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g. . e^idfed^afecinifiterdQreinsic-pfQgramsifancfDassgQiavad d4fea^diakaB3ade6^in®dtcdata) that are de 

elimtnate^atatftoffHhc COMPUTER:,- 

h. evidcncfeof, the times the GOMPMEERwasiBsedfed: 

ii.. pafi®8M«is^spci^ptiog^e>!S)rand^bQr ®c^ssadi3V«es4toat«Bay bfeOdetKSaryMt may be necessary 

aee@ss4hsi£QMiPUfEE R; 

j. . documentation andmanuals that ma\ be necessary;to access the COMPUTER or the computer or 

te conducts forensic icxatn inattorirof thoCOMPU 'I liRip uter ; 

k. . reccaidstOlocffifotmatiiffltabemjlnterijfitcRiotocQhaddtesseB’usfidDfe^lheaddresses used by the 

COMPUTER; 

k. Ks»tdstof(irflnfiarmiatiieoabeutLtbeQ3MPUTER’s:bii!fflinelEffctB'it5'iatm:±i«yngactivity, inciudinc 
@ newal ktagsaea^bgs, chriOW«er,h i sioty/artocookiesi fbootemartedfiM gfavocito/o rite" 
web spargls terms tbafcthg us&feenteted inb^yetotwocidsearobccr^iiiijc^ndernet search eng 

meordstof user-typed^tfljDaddresses^ddres ses; 

m. c^e^tudinfbrimBoBrr^ecssafyioamdfiKtandtibeiCivtdcticedescrfhcd iaPliSence described in t 

attachment- 

4 .. Route®tapodem^aBd ne twDnkeetfuipmc rtigiscd to can negfe doraputeraitothe computers to the 
Internet;-.. 

As ufi®djakiwei4beieHTi£e£©eDrdseanddynrcamatT(Uhf indudcsaH fMinsuaileefeatiDnajrrms of creation or 
stomgegiBcludiiagiafl^rfgrrart^cEttnpaleirfoitdiectiiiflmie storage^aichcasiharddisks<f«s otheremedia hard disks or ot 
thMcartsitorc6dala)s aaytiwpdniad^fOiim^^hBsfiOTttng^aiiiPhrrffighanicadd&gtiXsvKtMsrtH'iiMHigLcai form (such , 
ortypfifg)tigi)daayiphotographic:fotrmalsMbafmacrofdimchii ©no fkfaeuprMSj«,l idelcra^ad vste, prints, slides. 
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vkteetape^ 4 Bpti©rt)piicture^iQripihfife»ppies).photocopies) . 

Theterm:iklOMmcMsirmeariSfr«e(i)rdsxi^csdetjicrfiuQCDfK^pafKlonee.sfprm(SxfiBar|©Kridence, forms, finai 
raeordisdeheckMed^rs,aeefcgiatiBg papOT&iXMmiipM|eripsptotMs, saxteifcaa-mail, pforntatUDOao;! saved e-mail, inf 
c^puteEterdadr»eflaild/4isk^icdrnpPb*ioputan^QO^nt liepprtfc aMddvratibrtgsytoicbffliyDQlhCT, and writings, a 
iteranoftafiylype thftpantffeystinfiarmatipB;. information. 

ThfetetriBftcompatcpuitn€kideiaJttLypds ; efdPdtrcarkpfirtagiiiftic^i)ptitatodecir,ocfoercjrcal;ic, optical, el 
orothehWghlsp^ dqtepEPcdssh^ qteyica^perifogntegTdgiesd, fa^hfiiBtki^or^tdrageL&Bittioastithmetic, or sto 
iinehfllii^(^ktPp*tomppt(^rnpteb6al€^ompttlejspraPbilcDpilpMtea,2i3bletspfei>to cphapnteKi, aiiKfeblets, server c 
network hardware, 

Ttefetetneffsiaragfita^^aimietttiDh^esanyqjihiyKieakffllycpiyKjpcvaldebifipHiptutiirfdata ©artch computer data 
bferecerdeddE^ampfe&rtipdBde hardliisdffi, RAM, flP|q^B(Jisfe®i{laslllnj^BQrydCBk80IVhilaiBd memory, CD-ROMs 
otheernapigheMQptkalcrpediiaial media. 
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th : ail He liH^EEBi&TATiESiBiSrTBfcKET COURT 
WdR m 1 sSOfU'JM I ift&itMSTR ICtrCtlA GEORGIA 
Md£3tAS3iAiEH<M[S ION 


tlNTkHJCMrYk<t>ERrtM'STMtcSEARCH 00 



CBS BABBIEE RDHV.ROW. 

1 Tdi i Ao ^0 y Olrittid 

A LIGAf EiloOMJRih'ikSAddECl ttifiMi I li 


VI!N JANSACHER0CT25447(6 ndrlh<J phie.oper.sor)) 


n CRRAI T EV.dTlotGUTWjhNNl -R 


)) 


MpATOMTOT OK AN 
ATTTTi i&& • it/Art. ARTRilTbiTE 41 FOR A 

Whfetttt ANTeITTSAvA BOfefc A N P S EIZ K 


tl,.JilSlililifljfSaiiCickGlaajBafksl dt^fi^oDJlLjhstfihj^ll^osiSraadi^talfeafefo^oaspose and state as follow 


t A HltTiHii C 1 TO \A Ml fcACcEA^b RAC KG RQ UNI) 


1.. llrt^kelltiililOkka'ftTldfiippclirtM'aBtippkkEttitmfliiMkr%^llfcffl£lliml ; (utMdr Rule 41 ofthe Fed 
RukssH'dfiiOBiiindl^al’dFEJDEfficaurffl'rifltiioscaf'aljrirkripi'citiostsdaifiWtii 3tTife9^tBailikdfe)\known as 1957 Battle 
Auipudh aO AcM iWsi) 4I)C i miHte TJf fcfiM IS I '/S’. Mml lms ij£3 c rfteadt took 1 1 aldbWM Cfed a ligh&t t a chment A ; a 1 i ght - 
e^l)ChtfeiSi^ilfcCiiHc(MHfeVil5. ! t)^S7taSClsrR9lva2M-(l)76.]|Tg:&di9 t Tikr ‘ MrU l<nk Et tan d" tElEipiCH®" ; and the persoi 
oER[tE4LtlrY ItfeKokl WilMkk JC Awecs M&©t eW 1HRkite fi for lEieihaigs daserj^idiaAtiaateacniin Attachment 


ft. 


2.. tLaiarti k]xspitl aYia.li t A'g d hdi cvJitJh nd )fe 11' eiadat kiTeBtpafeisdi (oEBfRmsspjgiibion ("FBI") assic 
tJtaA Hftilla hii\ai siMvdiid batye laocfl kaote- (KlfeOiS'imdfe i s2 Cl G 8.. I (uayedrageitidhabimtut tbehave received tra: 
EBt .^ddaffi^oaittaittteOhamiu$uMifljiQbi. si'UiHkihliapiiiiipattittikcntaDaiKbcaptifflBtiMtelligence and espion< 
iiinv'^deiljiaft'iohhui'rinndviflBteflKignsaAiK&ijBs.'ippaiiiS dmnhm'&isdkpavoe aad^ip&HiagodMhgtence and espionage r 
ia^ld>ttm>iby4p@^a®i@iibkaii!iii|i.tiBaUftttiti^ar ?.ilinefftateiiishdTo u Bkt\vfe0ftl ec lutasld to unlawfully co: 
dfesisakUihafe® ShigduakMtBahenimf btrttliitliaih-jiiai delTudiilpotrraittiiOha 1 defense information. 

3.. fheneeisp6hl}abkbeaiffiet^kufecitkabtedlUfaViii&ES.Ntlhyi©biMarat^H>fi4[iRtsLE. and winner's 
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p^scai^ntaim^dOTc^ACi)ilteattaB(f, fnotstand/Miother iIffliiiHfegal^tTpt)^sfiissedtihark)l^tK»r©f illegally poss 
LSUjS£.C§. 191(B]&(e) . 

4.. lbfefaete(sefefo^tjnfhisiaffidiaNittaiird_ba!®dfifidta^pers(an^ kmewtedgeji my personal knowledge 
kiwiw[ioygg«btaiftQddMringimydpaftLeipati^ljidd^jkw^&titgidk)iitaiidiid0wmitQLrtf&eav3®tficiand information froi 
PBtaiKhU.&Cfeyeamiealper^ewe^eTbbiafifeJiayiilSiiimcrttlfidM^ei^oiil^ thatiteeeied to show only that t 
suffificntlprobalfleoaiBlofertb6a^eacdvvtah’antiiffic|id©es:8®l sefeforthiatU ofrmly kn©y ledge: set forth all of 
abotrt this snaueter. 

SiEAlf blTORM AUfl IIOR ITAi A MBi DEFINITIONS 

§.. Pottteireas©Ba.seiriferihebcl(fvyrtbplh}yi;(ife)t tbciwdspmbabtaieauseAabeliqye t)}abbabie cause to 
the#ItlitelilfiES: §/ r F.MKHJsand <^taht)ftvidQnc€a®M)tr«baLndefr(9^5, afjdfc>Craband, fruits, 

otbiafeitcnii$:ytegall^.p(®§esM(^iip\deteheaefiTiik K8iUnitedSteiosCdtetS^irDB,793(el ttaestates code, sec 
"Sufej$6fc©ff©ffiSte*^e") . 

6 .. Und^rl 8 iB.S^s§793(g),r^O 0 ^havii«glOT 5 uth 0 S»«hp)Qss^t©njftf 6 ^g^it@n of, access to, 
OltccmtfiOte\»a(Oy^0Cian^td©cQiM©f^m3tioiiEclatili©deAb«:iiihk)n&bMgr®e(^hiQh the national defense w 
iidifi-aMt[iaittiliBiposacssopbas?r©as©oto hel fever ©add be m'dMlhfcdtygry^dhgiUB&edJ^tgs eta the injury of 
todheiadvaafiaggiotfaijy f(ff£igaiiiratitfhjsy)llfjLHl\ftaiJiratij)icatdsihelMci^ tigkBgtfflUsi$iceaii§^,tO(fegi ivers, transmi 
ccMinmimictaLfficfediplideadvsrtttaapsrttiitcdrariatwrepfeda da^rapatj^ftfe® 5 ®® 6 ^ any perfi@ft§othe same "to any 
ei«tll£id]le(fccteivec:fe,cSffi\yitifuJfy,retaitns4he£#«ftapdfiabd0ifiieliyQrdt^)dteo®cgre&ftrDploy6e deliver it to t 
oEiheilbiiUdjSiat&s gnttitteddorfeceirnii dshatl heeftnedos iiitprisonssJinpt Bipre Lhf®deii))gar&j0f i soned not more 
both. 

7.. UndeirEsgcfvtfyetQrder h!S^iiifi)Btsmioiifleaiiyn6M - fiiPBiiayibeaQl^ssiftediifitfe^t)be classified if 
iss3\vj?my^i}pf0di^]ed'bycwcfory,ordsiiid®vthejsoatfobirifdhg linitgtloSfategCpvgmmftig; (i)tfeMah Et ates Governm 
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wiibhtanocuemore ©Elbe ca&gohies seitfoigtbiiiillie 6secuftyetCirdi'n ffdp; Steret^S^i®^arKfeti/= ra nd 
C©n0dd«tialJi;saridX3^reccla:s5in<3tfeb)fcaai©H|>Bt]atalais§ineatian:ai^hQaty wbestetefmiuesitbat itsuthority who dete: 
unmiih0fi^izdis]clQiutreieas«Bably^.uUibeje>^eetttdiia nesulfekpdaraagc todthefiatianalisficujritijtage to the natio 

8.. Wheresudtjmaid&oracdidjisdoisuMeeald.tt3as0nablyir!esi0fekhdaraagetoctbeu11 in damage to the 
n^tdrralaflci®bjidb^itijfprraayoiifn^'dM&cdassiinci(h§s tCoirfKkaliaE'iimd i»8st"kffi^ttrDperi}itiai'' and must be pr 
safegi^dfiddeWhece&aek unatahoni^itHsulasiireeDuMrjEjasonaidy:reselliniserkaisdaatag^toi:esu11 in serious 
titcanala)oabscsiiiri^d:bfciirrfpr;nmkai ffifl}e<b£ifiiasaifK:dn4»ySe©reitiai«fesnfl£febie pKiped^cret" and must be prop* 
saftguprdedeW.haresaeh armhthcriivsc^isjdPmacQttycreasojimblyj^alfiirte^eepitiafiayy gaweit in exceptiona: 
dtaiag^totthetrtayonaltsCouiHty,dwfcjnfciroyvtioinhBa^.bfffilasafifidiasml'ppiSscteiassdmiietibfes "Top Secret" am 
pnoppdyJspfegHffeisfdarded. 

9.. Class Hfcdiie formafbnrofiafl$ j designalign maydbfrsbaeedromly ?v itfepersarKte d only with persons 
cteiCtairinedibylatoapprapaiflp)ilpitedSt^t'fjGdWEillheittaallcaafewMdesistfidtvdicb e eligible for 
pcsss^^nscd'hDd^tPwt’o Am©iag.mhfirrKeqarirem£rts; itteqktfiati^jeicsjp tpiobtaitiiasecedty a person to obts 
difflanemalk)\^ftg.thalp^-s®ihacccgsto®tassilied4biilcdStaWS5(3@viefilJ»dntun&ti»ati(St;lhMs Government infc 
pmrabte rd{piincdc|0lJiiKtdiimfcapetiaonFii[@ti!er^tpretectda^ifi^dBtt)fmpd0itb)saotcdiscteir^Led information l 
sucltlni0rtraatw^P(pcrao0S^fea)liiitkditetfC6d«&tlib^n©biiBb®d'iiitlj6reiraoviBg Qkssififldiawfuiiy removing ci< 
irrftfrniatkMfrQmfauJlTOramii^aiiJgecfadytic^^edi^criiolSItQtb^classifiesl^nifiarin^ioiiiifing classified informa 
uE^ilhbriiLedzteeJatiansadfaperson as aobdigiblc tpjfcecke elassjQMinfomiahQhiicksstried.ssified information 
infpmffatianLmiayitisVbeidisclsscdiie that person o I n order jfet a forci grtgcMenaraentdo reedre-eign government to 
aecsssto ebssjtjsdiiifo£«iaiionii(h£ii5a:tginai)ng:b!eitedfi|{3iiesiagerg:>tm!iisi^tet®TOineih^^fihy must determine t 
rdeiKelsapja-oppipteopriate. 

I©.. PuESiuatttlotJ&xcsattimiDfd^ blSM, aJasa6pdcin£©snatieo ciMjfaififidtiBbautQmatedned on automated 
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iirfisrmMkmL^steai^tiBda^in^jmelwcttiks^nddieleeeffiiaiimicatiMS^stemiSnthiafetciJtecfc crfiae^ms, that collect, 
o)#niinjuttl(^e,d:pi'raput^\jdi^cniii)i^eppriaa©ssepr gtDCGcdass^fiedrirdbDm^icmLaBistLl&Bvainilaificdmation must be m; 
ima manac^tbat:i<t]!!ippy©Rteiaeecsa(b$'ditfffliilhprbcfi4ipehi®BiaBid pressures therittteg2ity efidieres the integrit 
infomiathnv. 

LL. 32 Gd:.R. Marts' IQftlsartdjlJQDlsregularcatic hangUimgttrf ctasd filed Mbitm^tionf classified inform 

SpeBiiiaailya32LC,F.B2§ 2Q01..43.. titled CrStoraflge," ne|ftlate^ihtsphysffigfeprOleetiqimfl)fedas®iltdde physical prote 
Wcmsationi. bFihis 36dtioiT3pr<es(iribcsil|jairis.'iet(Mea0dtlGptScajfdrie£ortnMiond {shall be stored Btamat ion " shall be 
©£A-app«we4 secta by eonta i iwttspfc sairife by i IbtO'J&jdfiral iStandard d ; W BtfeT©). 8 ll^rdawapepBpb ns td ) 
st©ra^<^as(^&trvtcledtncaceeEdatid(hw^bc§d2flMr53e'4tialso SjqBitosLpQ’Bod'fc inspeclbo ofti^hires periodic 
oimitaia(i:n»ifl tba<flsfep6arubttrust£»n43cteet«»u^Stflffli.iMwmgtt3ilbertbtpg4«m, among other things. 

RRQBABLEeCAUSE 

12 .. As sgfefoi^ktfbiihtTaii^hbdoijfetWlNNtaii^vndeirisijiEesttgationcfetptiiJliegtigation for prin 
amdiirapippeijl>^iarpo¥iBgi(attditiq»naniiting:skissifle4fit^eriallkttiifltt4tffleMq3eee6.Ci)mfnMmtyan intelligence < 
Ag®niyi<th^tli.S!'Gosern(meBfeA®fflattyi:) May <9r2aKfoiflodtpa§sit^thgoclaB?ifffidd passing the cl 

mat«fbi4aan(©nlme(iwi\«rtaitk4ilbcdttte^Oi(jdB6')."iWiNN(b^isea:C9mractorNW]tth RJaribiueontractor with p 
lwer®ahQitiaild(neirpo<caiifptoa^tgtied tasteUgSieQoternaieQDii Ag«Bey4adili^itfi JG^efgjg. Sbfcbaity in Georgia, s: 
baramerepi^i'e^fatittetfaeiifey sraedDfitcf absutciebrHarcyrllBSfiili?. #'«<EBBulaBttary2fil3(]uinitiJ hEtom January 2013 
emptbypTfiBhWitbiMia-ibulsutatoiiKaioiiahCcrirpfflialtsnaWlfelMJiJfcmisjaoractiwiiidtayHtieraberarf active duty mem 
thffidJ.8,Air Botae andrhekl afTdpl&etticdt eJearapcesecret clearance. 

Il£. Gha Inned, 20ll,abeBI3tlh®asFiK5lifkdsb>ntbedLf.Sefijcsy9rmtiL<aiUAgency(ibaiilheient Agency that tt 
U.&.G©^amfiftteAge8C5tebad/b(H^ctcs^BtecfcbyitJwcN6«s%itleliGniMa^3Q>.u2j3lJ^tregardiag aao, 2017, regardi 
updMTtjtig^tQryo^^he News fihitlei infocnml tliedi&CdvdaiiBiem Agency thMiitrtvas\ipency that it was in 
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possess bniofiwhafitvttetjevedttolbeijDlassMcddofciOTiaH^flilfeoKdfbiy^be (jLb&CoyeitnmeBthored by the U.S Gc 
Agency .TtofofeJeMgiQutteltpievidpdtheLUdii Government AgemajnwiJhia cs^icf^hisifoiQumenfopy of this docum. 
Suh^^QatrfmalysjSL^tte W^.iOi»emraentG^g<aKQh(®mfirtafdAh^t thedecLimaeil inithoNieivs document in the i 
OiBtlsy&pes^saeeifemtdlig^GertTepQjlit^dJabHl®ipbahoiirtdyia^5e2DKih(tbe:”kttd{igeiM»y 5. 2017 (the "inti 
t^prtfatgT^gTfiis iffllaHigeiieeti®pMi|igris;6lassapcd:atdlhg'l'Pp Seiisfefci'eliMidiefllinigllbat'iitsp Secret level, in 
UBimlla©f(i^z!cy^la^e£OBldrr«asc(nab4'Bcsafedaiam^iifiesIJi^graiMedamagepelbeiaaiipna^rave damage to the 
s(aaMit^hyi)d i&JKarked a&aotiid "0 k yifciGoN'HnmriunlsAgQB.Ydiasiiskitte oogiliiiiEifditb^ tbdnce confirmed that 1 
iB^diitgici^taifflslBilbiraatiioifthMA^cfilflsisHtctd atibatda>adaidtei(mieilhatitherep©i^iig wasthe time that the 
pdJdilshediertoDabQut I'4a>oSit2(M3.yar^,thatoaiSti i tjtfcdn adiortc iBTmttly ioiflains etassiified attbah 11 y remains cla 
Lovoli. 

14. The UjSsGosmiaiatttiAgenftgeKaipirffiddLwideeiira&ffil shatedd^hthe^i@®fe@u]tl?t the News Outlet 
ajKhdeimiaBedLtbe(|)ages^)fdh^B»tclBf2niee€cpi[MTtiw^Lapp9®ffid4o be^aJfitedi.ar^/(a^^e<hd to be folded and/ 
suggg&atgilhqy l^tfe^eh^nt^tendjhamdttaidicdiodt PfensbeoEedispac*. out of a secured space. 

LSi. The IhSsGoserneimitsAgenageQndiitJt^ifl^otl^ftakaiudihtceclQterlnifflQdMhD to determine who 
aeC£®S2d^caW©lligeoe<ltep§^i^sifie^hspBhyceBiiOteeriBty.^TS<lViCiE0n3enitTAg®K^' U.S. Government Agency 
delttmaktL^dblalt^intyvWuaLscItfirttetiitiiisrc^ettiiirtipdrhesi’sixrBidivjdijaiLi jndadocfeV^MvIERdividuals include< 
A tfitAetaudifeofithie st^iitdi^dBab" de^coWpiBeis'rcvteded tLia*i^\iLhy^EREteteFiirail ctflniactwiNNER had e-mai: 
witihiiheMc\vEfe0atleUtTbeaudilidi(feacstLjievealdhabitn>reK4ifiiMheraitidfttid u alshade-raatieontiaetiivi duals had e- 
with thifeNovs Gut hat . 

1&. The UjS sGosemaiootiAgeneg deteptnitwddhali WdhiNJM had ehkih ft had e-mail 
eon»miuiijeatjen)ftvi4h.t)ie fetes'StGuyebomDcabout Mareb3fit2fll7^and3MarehSi„ 2013. IheilrstBi, 2017 . The firj 
e^^E^i , as^^&@rlA¥IMNIIKNMaRg ed®aiihigdcteesaalalred'dDte^(g^iiitial3u£im,Mthtd^®@%0atldl. com, to the News 
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tmiuiWJN^ElN^eapflteiEfi^ticsldfaBSS^pfeitfatpfHlcastrl'fifescc^Bdg-ipaifiwasfrom'tbfcic second e-mail we 
MewsGl!MtetL^a3K.0lffless@pltiEec^tgdig(iJlfLrm^ WM^ERn^aitesis-jptjonitisrSiK'^rvgcifoscription to the 
Thfed^k8iteieSS@gB»y®pmaicCoaj«iis apeisofflfti eaj-Baita^BBfcncASpwsfflEedjbyaQrcal&liifliediot sponsored by 
winbrthei4SuG©ycownaUrA©3f«:yAgency. 

17.. On QT2ab®]BbMayyfe\20i 7. firntdaysf after the jaibbestion affAe^tessi&sditffip@fly5ifeport, 
MhtMiilcQndiieted^eaisheareftiyw U>.S. OoserairKnt ^geftoyi&ieliassift^fesysieiisfQriseiattified system for ce 
smotetierra^iwhiehilediMNbiijR toiKjHatlfytlbe infidfigeneg repttftiiigi.t©B]Qt<^feQUldVl8]g^c>rting. On or about 
2O17z,WW^fig^lscipf<intpd:thetietelltge®cerfip®ttlrfe9^<c©'i4Wi0t£5¥lM^ER?s oampufer hjstopyrNNER's compute 
K^ated^edJifcndhi^iiitcflnypathcrtinfceliljgencft^epQirtitJtMlay^HJe report in May 2017. 

l&. At ahiim<Kiteka'aBfeibdhiaajTid3vtthWiNM31ha^iinaintwrnetlBn aefciyc rlepntained an active Tc 
SeerefeeJcameeftalihe U.Sr^overBmeBfc Agenej£a®n ftrfaetfcthataWJUiiigheWIfcIMiR had ifengh winner had the 
BKfqired:accesstcesearchdbBMdridlswflbeiracJhgeiic^epartingriheMfdgBaliKBn (Ka^atuedLiodbethe information 
imdhgM(^feiiepertiin^stmtda|tcdtohfit^)±fediaiestanchWtJN|iK]idliKa-efef8 d®e$in«t]]jQssessisherefore does not ] 
"’itfifid to knew,’ 5 

IQi. On exiabebbMayiM/2047, £cepdrtcEifordb©News ©odettfltedeporteeo)iet (the "Reporter") 
eemaetedatiothec)ihS-iCoveromeobAgenfeyiaffii^i»fthaflfdJiiiiwthas^dprforvrabtficmghipai'his prior relations] 
indkjdiii^lMarkiS(f0kacffin)tfa(aioit6MiihfeUt&uG(SyernnieBt (ibeVCGotraatQit^nd'hctK^Jonecntractor") . The Rep< 
contactedtheCaatraElatyiadexfcineissageaadaskcddnrpdcMey icwjcertainitociraeatsvlilt© certain documents. ' 
Rgpcaierd0ldtth£<€cmtracowrtbatdbc<Repetteitha£hEccBhpdtlt(tedociawcnistttfi)u^jiiltshiBailcandnents through the 
thcy^vere]f®s^B^MfA#gus!au^eei^."(^dN#iLl£R rej5»fa$NJ]jAiigjetei<fes)rgifl. 41t§iJtepojieGeorgia. The Rep< 
bdiciwedtbiattlhfedociiiBenistwcflescret lohb® fB^ntsotiffioMiw'arkbigiadibfetocatiQttisJbenig at the location whe 
WJM4MRiA®aflks_ TheeRqs}rtcrtle®k pictiltrcpi>ftbe:dQcujTScitl]s®nd<senlTthetrBtCBlihe Grnittactflrem to the Contract 
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The RepprteraskeddheCootractochtdeterroimetlbe yeitaeityMthetdocircraanis:iTfre Cfinttfaelotiocuments. The Coni 
hif<fiorai^thetfibi^(K^<thmliethfi!^titfealtlhfcdqe«mem&isveirei&k4ocMoraethdes^tteCaftteact(iStonetheiess, the i 
e0fflta©ted4hc Ut& (SQ\a;rniBfitrfeAgifiae>tonvgBahqutdHne)l, 26)KliiioinfoHtiltieE)03.7C;omntheflbrm the u.S. Govs 
A^ei^\ToBhisMteniiQtik)BaviitklhfiRcf)iiaU‘rtays(FQfidtJiiffel..2(WI7sthejRcpC!rti2r texted®lle7, the Reporter texte< 
Contraelotaad said tl^idUtSiGovernmciilcA^eeeyiiolfidaBlijiHliverifiedtthatLtht doednreatwfiied that the docum< 
»eahlWh®hqaes^B<rialj0wfei^habintdligctoa<trqmttmlilnit^eiftiaeassep»atied withntbeimages cmssociated with t 
lws|>hpted®e,C<iMMracOMisopiriffiddhe Boppjiilngatiinthecas^piatiedjyvi^i tbertetelifigeBGecrepQrtiflg with the intel 
at issuer. 

20.. On IMtoy ^7lot29,2@J72Ml>fNBIiitwaw;lad:0BteiicfedheilrHtedeStet^ toifiiedizp istates to Belize i 
CenttalaArneiiKariWtNNEBipfaPidpdrDQticidcitlicetiJScCrOis'erniDiCTt Ag6nc>dtiAMaichi§Qt7 Agency in March 2C 
horinfionttoitrax'd teJfcffec^ ift<Mi^e2Q.lzfe The pttpoSffifljfWINMBPrs^panad aod tecwctBFit'ies travel and her ac 
while abroad are u nknowii.. 

21.. MIMNUR iresidefeal the PMsMlStESiasivcEiJledaDrr/Jime £i2Q I ^/byihcreDdyerii) 17 , by her Drive] 
LbeBsc;adckdsJrfBifk\'ariiflililydbilliiig]adidfeasesLlAddiiaMtdil}^sW4felNEM<iivtns(and]di^ , esiaiNNER owns and driv< 
lig^ttitKdQKedchlB^amCBbaM/ithu^H^dhltSiA/lMROtS'i'lMdS&asS'eriSedbyihe vdtieteied by the vehicle 
Eog-i^inatioatnfQctnatiofioAi^fecwiavviidgaiHgla-coiQreihiisESari C-ybe park&d)afeihe lFR£MlSBSu4rE parked at the 
Jranc^.201^(had vviBie^sediWH^ERdriW'Elffiliglta theMHTJCil^ ihrAilgiiBtaySH®gh£:oBduiSe%usta, Georgia, 
2017L I coitfaii®dE0tfeJiiitfin2.JiM7. that MMsIERlhas avaattflt® phase seraiclediiiyar phone serviced by 
Cin^rlalrMrT&T&dn iilyitrai|iingi^idrdapgriencd, pcq^srlypicaHy stEaethbh d^drdnicls^idstore their electro; 
ccaTe^epdenfle^meludingdiU^sio^pftiatedeemaiblirpdiehilheihesiaBdtratispartthbHaiiiitthcimes and transport i 
vdlielcietalso l«)i)&othlahp©opdet5tpipdl^cliffrjt§rpallsllettroDfacistpragcide4iceiai«lronic storage devices am 
e0mMumieaiiiofiadcv&esasu£h,asihuiBbadTiwetiaBidccihulatphQiTcS. oniHoirlpersgihoThere isthitsheir person. The; 
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pnDtoabte]iaus^t05feeltcycabaidjBtjdligfitLis:e rctporyflglig4ieKyerie<f>ofecira^p®nderK>eihMwe@i of correspondence ] 
fofcfflJtttfMRaand thei^ei^vQutdaltaraopg Mh©n<|temsifrfi£vidiaiiriar>bfalBO,iJM@yit>ef©gtid/fflSute,theiay be found insi 
FRfiMj^Sajjditheh\iEt7H;€LeLH§wsy a8smLst<aiag©ian4ieem^i«iia8tiDncd®tfiicesdQibWiIM4BR\Sices on winner's 
person M(Me0\®Mtere Ki^efeahJgcgos&tQibBycwfetl^c'fcycBm^feetBtintuaicatioiiisbeteffieof communications : 

theifeJei»svQutieitaiBepgMh©R4tcmsKtf«vidflatiir>cfalee4.wyhbe.fi»yidv<auue, will be found on 
MMffiRSs de<aDttm©d©dc©£atil(h©l > iytMiSifeSpiiRah©AflajlGlnIntiiiri QiElMistttER^P&rson wiNNER' s person. 
COMPUTERS, ELECTRONIC STOIUCE, AN» FORENSICiANALYSIS 
22.. As ctes(3-ibedldBdf\ttacf8nflM<HiitWsttippljcaitati^ca^p©r<nMfiSiont(£S^r^i ^rmission to search : 
KKOcds-Riataiightitefe(/t!und)©nfh«iRRIiMISliSe ieMuMYEtHCl-Ej aud^nVWilNNH^’sfieflsoanimiNNER' s person, 
w^ate^e&fiamnotheyarfefbiaiide Qiwufosm tan®hicb±hc itocotadsdraighlib© fefflwfcisdtetaiitgired <t»tafound is data st 
c€«npute«s'hardidriae©totter<st©ragaiffiedkfe3i'bB%4htti»(a£iant applBd foft^Qtddrattd»©riag>|hieLed for would auti 
SKiiTO^d)®t©lte:Ste«gedTi<^8©fi,<^teteM^tte,cqpyib^e£©jE<l.tj9nieailtysl©pBdLng of electronically st< 
iirf®rraatiflm,<all,undicr RiHd41(s^(2XB)Li (e) (2) (B) . 

21. iPfeifet&/a.er/«iHiad^ubBnifelhatiifta ernBiputeifofestQm^jiiiialjurarisTettnckgatbitedium is found on t 
PRfiMESl^JiiithctV£lW£llJ£:]£ffipiioWINNl}R[*i3i|is;R>m, fte£GBicprobaWe£ausiettOfte±fcae)lteseause to believe i 
KKordscteilkhaitoiDEd ©rtth^©omipub3KS)ir steasagcjnadiuiJi. lietatrkgsl ttefliltmyingcreaswns least the following 
a.. B®sd®iJ royknpvvitedg«ib - ai|W)g,iafldi- > Kpeitenc®piikaa^iateldion^ulQr fites>®rthat computer fil 
tsfflmmtfc(ri's<BjEh filcsicanii'aectwarcdbBOiilb&oiteM^c^Qarsraftefittey teveJjc^tfears after they 
downbadaidntoastoKij^aBe^gBi.itkttittdapriSieMeatb^iatberlntfiHxefedEktb-oflkte internet. Ele< 
flkasdtov'dtJoadeifeMfeaistetagc medwa^eatfribastmcctler years atditete orcno <§oest.rs at little or nc 
EveBhvvdteerfilesiliie® teeadcteech, they, earth© retd©««?redanoiMfesDeyearsitepr months or years l, 
uaogtforeosfertQOls.TbisissobepatJS©»'teoatpcEstMb‘edetet©si'afijfeottan "deletes" a file on 
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ecampuitie^lfiedatacdiSaaiediBittediUedotonQtt^tuatlydisdpp^r^Tjgithea^tailaiiy disappear; rs 
dataa'emaksiQtfethcistQr&gc Bifdttanr^ntifetlisiffivcntttrittiendhy ii©vdaterwritten by new data. 

b. . 'Ebc£efefe*ide|cteldDteseclr rEfflraifiJs ofrddeteddTlesj itn^dreitdedcl fteieispa^e ©fey reside in free 

slaelcspai^atteit istinispaicepndlhcs^Mage rafiditutetteJtis^^ecitnKiflllyibetrt^t is not currently 
usedcbjb§ii actixeecfilfivdbfkang.pcrtods oftin^: ^dbfictthey<ace eterwrilttfioda they are overwrit 
addilioaoai9oraputeifiiSifflpeEJiiiigcS|>'sii:Htiiifljf aLsaskcep atrs^ordiCffcdcfeae^dataiiBcord of deleted < 
a "Swapper "nccOvery'Vfitc; /" file. 

c. . Wtholljpapaapfeoiti useb>generatedIdcfetemptiicTMctfagc mffldjaj-tfflrpartiatla^e media - in parti 

eotr^utcraiintctBaJlwdidriisietrdcoiiiaihfilcctroivkietidaneciQifcbm^aiompaicrence of how a com] 
hafcbeeadtsed^wb# ii/hasibdon Used Ifee^duvhctlsasflised ifenBogh® aifeav used it. To give a 
6x^pfeMhi^fibt®is£Ebeiadeiice eauiiakeithe form ctfaaperaltog system of operating system 
ecajf^gigatjoitsiarttfiacisJKflTf^eiatiflgcSiystepfeafeapiplifaypn ©petatioo, Explication operation, 
sx»lerardatfeslajc!tttrea,Gandr\getMabjMeni«»£5!:t‘si«ap'fn®trpa^ng'Ei(£Sp'C(jmp^lfi5ing files, compute: 
users typit^lycckiaQt etasebJtdekte ibis res' idte£eiid3ecatosL\ssp#oials0ftwardJ& cause special soft' 
tyfXal^igiitf^&irdbai task; fctewte veaAtkis tedmteaHy,pos&ibJ&totdedeteibis11y possible to d< 
uifomtalLon. 

d. . Silrailat^fXs thatLbffi/ctb(a:o vtoiaved tebtethelPtewBifiateLsometanesiaidorrKrticaH^ sometimes auto 

down loaded <mt©ritdempoi^^atei^directory ©t"eaiehsetory or "cache." 

24.. Fo«msttic5'/dg«MeiAjfeliirtbsr deseiciibed im^itachteetit BntlmapplicatiQn ss^ksthis application i 
psTOisseddoilocateiraolawriy aonnputeifilesdihpbKr^usea®aistdiKtetffitii5liance.efethe®rifflsesdirect evidence of 
described thei wafiran wlaii a be, fob (hreasii© e I efitren fecyidencc ibaieestahfcislles bowaompetetrSiat e. stablishes 

w©Bteusffdethe putpo^eualpbete us£ wtetiscduttaepi.*tf»d> whsad Khoeenis jaobable^aaseflDodbelieie probable cause 
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thatthisfesns©«tecM)oicfea>adeiififirti:BI fe8/©aian)istoj)ageirn]64iumiiifelti? in the premises, 

VEfrUCM;, or on WINNHR’s person ibeeauSes cause: 

a.. Dataton the storageefl8cprQjrtidgsQvidonecirfsi ftteilhahwas officfeoifihfe that was once on 
stoca^^Bediefliihtrt hastsirttsieeflidetettofeamcditeileOfeeiradcteteidtptaiioDofafa deleted portioi 
0icKjsuateas:iiparagraf^tbabba^^gohMciedfront aword|>mee3sifigdtJe)j word processing fii< 
VirtualmicnMsiyspaging^^steipsteawetraees caieiafoanaUtaiton:thestdrage) rmation on the stc 
medium thatahowhyhattasfas and .processes ^serecreeodly actiy®. i¥cfebtdvyse*s:tive. Web browse 
e-mailprqgraips^ajMi,chatiprQgiiams^torefeanfiguraboa4nlbanSti0ni0aithejStoilagfiormat ion on the 
n^diiuimtliatsanio^almfeattationEsufihsasiDrdiineaikkramesialDdipassvicaldsames and passwords. 
G^tmmgisystetTtstgand-ccoiid additional iirihnnatiomiiiehia&the^at tachinenhefi as the attachmeni 
periplparialsatheattaetenenttofdOiSiB 1 tashstorage dc\neeSioismtoeEiepaerftai Storages r other e. xtern. 
media* and the times the computer was in user Computer filesystems can record s systems can re> 
infOmffatiQnLaboiAlthmdateSiileSafe^e cfcialedaisKfetthe seqaem®dna¥idcltitteeysw!erfience in which tl 
eceatedeaUhaJgiWhtsgiinfciawmicmrcaadatetbeifalsidiediater be falsified, 
b.. As c^pfabieidnteafeiin^ijtfOrtpalionEsloraaltwithindteoraputsetahdother computer and other 
eteetwmiostdca^troecygeiay^dtdsvydifispjc^aiteviidencibcrlutbea^heywh^iia^ypf the 1 'who, what 
wlhenpwbdreuaad howl dfd^ciiiflirtfdeoiKkffiMmdel- iimMigattonythUsonaWingstigation, thus 
tftedUniledt&ttftestoicslabIisfa aedpaMcicabh e lem cp t or/d teraMfretyi Urn exciuda: alternatively, 
thcdnno£»Dfcfe®m toher sfispidbBxImimyitiBiriiDgiandeixpepieilic^ijnfQirii^atBond experience, inf 
aoces^ityntahSMipateramistctf^c mediaifeiga<jegime^iirtfon(Hali5>n, registry information, 
eominumiealtDhsjjmaggsiapdrncaties.iransautipnabkiidrniaiiioni:iH3cotdsEQirsessi<i)n.n, records of se 
times and durations internet, h istntje and anth-v bUsj spywaradarafritiahvaio: u s, spyware, and mal 
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d^e^ixiniprflgjamsJfeaaiHijdic^wbfidia&ascd Qriconttaltechtiie<fiomputec®trolled the computer 
stoiag^ediadJiiis IttfifcEattribrtiomtffiwidtoicteiisallaleg^ufetodbeSearehiLQrogous to the search 
,f iindflaaMoo^p ane > !i! P S! ^ i,( y?' ex ®^ 1 i 1 ^ jfes^cdt&iacraatat^fenesidene&rlhfe at a residence. The 
existoneeio&abaenefosia(itFvirtisasptj'ivareLiaj(i£l,m3|vpj7eidetpctaonlprograms-aia^t t e ct ion programs 
ttvtotewbcttoftretbBcomputerdvastirernete Ijtoaceessedydb as.ipcatpati b§ eri, thus inculpating or 
esaadpitfmgLtbf coiripidgjwp^err HttrtbsE; jcomptner^md staragQTOodiaiaeJivatyDCKajge media activit 
(ndfoatebswiraad when tteeBom^crcQJw^iCiaiagtntcdiawa&agasffiaHciiausedsfcHrccessed or used, j 
exdf^pJ^,d^(^ili^di£rdbe(*rttiHtesiti>'picalt)p(ittt^iiiB iitfppiiialkailtliatclogtain information t 
ee*n]put^tis«s®eoTOlcSffasiQnli««g5iaftd dutatiaisafi^TiputiefiMlivifcy, assoeiateafer activity associ 
wilbluscr£aE£oimls r (slQctr0i?ic<stloragcrracdiathatoffliir^:€tcda'dtihallittaattnpotBnir>adted with the cc 
thedI > ^tkessefedHei4gh:WbiQhgflie«]QilnFtutQriaecesscid> i nefe'«>rbsaBdd«jjinte , nelorks and the inter 
SudhirdbrroatKatdl(tcnv&iini]y(Ss%al©ir®dsiutid®>tstaind tb©chrttfo©k^tieafc£otitext ofironoiogical conts 
ee*npul^fir©bcb-Daietst<MagenKtd(ia:a(^essaatSM»i^lsa®afe,reteiflg lertble eroohcts relating to tt 
unde* in vestigia ixxticj aftdcbtianafJddsitmte mfdrlrte i oacatta-cd Mthinra tbmpu let or e d within a comp 
di^BdoslbcaggtnJtaj^Baa^pijtMdei^cipt^^eteecdaiiiiigitl) tbe/ph^sloafe relating to the j 
tofiatiffltcdrotb<fr cytdeeee fflxdLifteisiKgjeetocFottesaraplepraxatges Sloicdeaa=anple, images . storec 
eiMputeieoia^ljpth^taw aparfcicalapkicatiamaiKthaLvecj^DliDCfltiamiiifbiramaiogeolocation inform 
iin©ecpQratedtiftM> iisifile date Siidtefillateiatjqfueflt^teltecGteiafflstipgaimaliPp also contains ini 
mditatiag»4gnlhceSJclD]rL«ri^ielwassQreaitB4g'ih©tf®astcms:5Clfsdch tHt^edHos, stence of such i 
atoog^itbie^rBaftjteifteeton^tiioffilo^pinapaliaimcIlcaicstJicnimqscBdcscri’ indicate the prese 
additiigrtaieteitmiijestoragermedte(ttgigadigildlLOimfeia gr.gelbilaijpbffitiffi&’ithaiiera or cellular 
incoqM^ede^era^mlltegeograjdii^aKKibtiBJpHiicirrfoirfliaiiicinadticribedrtTlecoiniation described 


Case l:17-mj-00024-BKE Document 1-3 Filed 06/03/17 Page 12 of 15 


may ckbefimeulipatcjafjeixciilnate dxmnppitler uses. l^slputfoimationrstoredst, information sto: 
witibMacQmputie^ima^rpire^idcr^tovMfeiris^^iiaotihacjQniptiter ij seres state ofomputer user' s st; 
miiwbafeitreilalesfeiLtiie^lfeose ttmteritiKfigtii^ioonfeteji.atw^ittoftfmiatifln For example, infc 
wittiinLthebMmpttlfipm^iindH^tcitihaiDsmff’stflietiseflBd i Merab taLeommitia driment to commit a c 
(feggiitteBnetiearehes=jediieaHegcttjmittal^damgngXiMfi^asci9UsafiSfii®fcg^ltor consciousness of 
(feggrynnjngaiiwjp mg ft \prppagrUpdesh-oyrevtdcnftesoi he/ corn p titeroe on the computer or 
passw^prc^etafl^/emiQc^ingssu^tcivdi^nfiedftiaB’eflbdrtoaEonDediit frbtfdaw to conceal it fr< 
eaforeeraerat^t) . 

e.. AipefmnswhhflpptopaphdapMUarily vfkhhMvaardOipputicitlwcirksrcarKcafteputer works can, afte 
awmnmgilkistfhceasi£<eyKifiBQcdnatsipii(apijr®orUo.\tidra\'pcai!(3feisiansab®Hlhp\\draw conclusior 
eompute*S:wewfeasffidu^Wcpurpfii<® (jfutbpiB$isc,c\fh&aseidrtheBteancHwfhensed them, and when. 

d. 'Eheeprpoess:e § ideniffyiiTgsthc efaciiijpst btecks^ a^sti^'lclntries, hajes,akso>theregistry entries, 
fi3ttra®fldreifsi(reYidQnte®njajJl©i<agc titedairrEtlTatargaecrEsslairyrto d hast art re necessary to di 
acciii^©t(mcdi4smariLiisajdynarnK |H , od3 1 saaMiltileptis(j®sableWds|3ffi:ifytjn is possible to speci 
ad\(«nse4he:reeoKtedelje^otight?«ompiu^3nicyidBtii0pt8:i*Qi alway&daia that craoibeaiways data that 
m©Ee4^5evi®TOddb}e£tiretejewateai®\aridvpa£ffidmlomgdo ]OB®stigbt 0 rS.o]\^etheriJataestigators. Wh< 
stocsdeati aiCiOraputemjsiavtdence;may±&p<md20miadetira$armatton stflrbdon thef ormation stored 
c*m[Mei&and=tiidapplteakpipra£laHbdcdge3fbohbb©Mta(dgBipateeb&hdvesi a computer behaves. 
TherefeffC;iO0nte«titatBtf(tmireationmficussarylaanderstandalberyeyidenoodbofrfcltend other evider 
witbiinLthet!5c©pe(0(f#fae wfirrahte warrant. 

e. . Fifftbeit,li®0pding efiiteiideTC^'temiaieamiputerfwas)iised. t<heippnpDee:of^k$useped, the purpose 

who imsfekfi, and^hffiindsaiTtoelrajessbrBaTtcdetssjffyldiestsbli^ctbata^jaitidularabiingblish that a p; 


12 


Case l:17-mj-00024-BKE Document 1-3 Filed 06/03/17 Page 13 of 15 


isaiQt<pte^Bfe@ftaistQrag&iTKdnHagfe'ojnexampJe. tliecpreseDSftpta^scweeofresenee or absence < 
eetuntefeforeBaffepEdgraps^flati^'iobs iMttgmmsi/flnd agso6<pt©iidat4)imaysh®sociated data) may 
E^e\S«^iaesiabl«hjl1tgitteiiBM's<5nteRte user's intent. 

25 .. NecmskjLvjjtttafmiiixrz copym^piitiejCtimpUkfie.s or^ptw^rwedki. dttdmas^asesdia. in most case 
athor©Bgkh^refe@FaiprOTisgsp!r¥ehiete£foc)infoBnaJ<wjfethebBiigbtd?etsiai[edcQii afteagcrfji^Ht be stored on st< 
oficitrcqatfqsithe^eiztjreEofdb^ physical storage ip&cfia imd laterurff-aife r©\4eM soa&isleniamth: off-site review 
thcavaraantaln JieoiofKiieovbvg stotagetofidiEtfroBfetiite piteiai^sf»r<yfiihielfi^itpissamgdmosr vehicle, it is soi 
possititotoEmake artjlreigeiieojiynaljsiopagg.iiiedte. iicaem|l^ speakbig, iieagiegislthp imaging is t 
cbJwplit^cotriJsietpieiiHtfcoffibeeQrapiiteifs data, ioeh^uMgstH'ldddjt3it5g9totsatidijdflci^l Sfci. hidden sectors 
Eilbfei^ciatfd0tiiiBagjngiisi©§6nige(3£SsarftJeiffnsiitfedb<saQcpracy fflKfecompleteBesfciaCdaLay and completeness 
leeocdfidataithiestcwagemcdi^andMpEpveahthetles^feiberdBtatddiei&Bnaecideiaalieiita either from accidej 
timffltiiQnfltd^ru^eBriTtbiisLtsrtnueibecauiteofetbedbltewmgie of the following: 

a.. 'EbestimfiriteqiMBa^fhraii esamiualio®xaM.ni(ated(abov(jv3iQtaU«sicteB©©4akes<tlte all evidence tak 
fia-mno6docitfH®ntfeaiiKifitesdhatic!Mi)ct(hKHy<3/«nvtofeoftaiid,i^nal^«^|icvjdemite. Analyzing e’ 
ofzhdmsm c®mpuitQFiJiia£bcdnaitsedewhalufebai,be®nlua<td fiat, aralswh®bas usedcil for. and who has 
EssjptesrfiQnsidicrabtedirafejaidttakifflg thatdritjdklimy artipreraisesfcauMibeon premises could be 
umre@&«iablft)]Ase»|SilaBKd]abDMfecbcsaii8edficis«ir8»ntealteifor\fiaBen&iiet calls for forensic 
©teetrenkrevidcsicfibitite^cefiding^ ^kariy^hJalri^wjll b^heopssa^do tbarowgbl^ be necessary to 
©JE^iine^tQrage:H^ianted!ilMaitnceyidem:iinSterag©jn£dia sanD^a^ea togUa can store a large 
v©Iiioi^ldflfdrrn^iMiatRie\MiewB^\ihayBft^matbo fbntfaiig&deiscrib£d>in theings described in 
watraaticandakc Avcleks oeankifithsr depending onldptvalum^ ofrdataislOKcdiand of data stored, , 
wonkfclbOjbnpnaptkaJlatidattvasiivt ti>rattetnipit®ntesitcat tempt on-sitc. 
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b. . r-Bchfticdl jecjuircmcntsi G^mpuierscaa be configiia^ ini^veraldiffpcentwaysi several differe 

fbaturingjaiV^rifityyrfidiifler^nbc^cMff^^^msr^ppyeJtlij^oliwtferaB^ application softwa: 
ceaiFigli|aikmsidibgrefomeseacahing,them;iS0tnttiitJipstr£i(pircsdQ(aJ&drafeisowtecfg^ res tools or kr 
thattnigbtjttol hecprescfit pa 4be= searchsitei eTbife sastlarray tolcornpy terbacdwarea y of computer h; 
and soBwaritavailablereakesjfcdi flieufertet know before aseareh AvbatdQelsQEt tools or 
kiK^Mg§^iWib£]rc^r®cfet^xjarii^xKedbcsjistttiyiziaidtilifedia^©odhe Bnatnises data on the Premi: 
HoM^eitjlakjagllM^stetageanedja^fr-siteaml isfffcvajjgil kirftiCQjdKQilbding it in a controlle< 
eDivitonmeiUiwiIbailkav itse&a® tbct^repeiODehi attdekrp»vjpdge. t oo ls and knowledge 

c. . Vafkayaffonjifs dM©etr0jhc«iGdia.r8cdordsi«(Mglu imdetthifewarranhffiDiiMber this warrant c 

sto^ifi ^Marlety«fsto§g<b®ed»*£i5atsr4baijmycQqtij)ted)f£-iskererta§wi)^guire off-site rev: 
WitlbispgpfeB2«i&a - e0BiCEt£KrfSisic tools. 

26.. Netiuceef foregoing, andeepsisl^t ^thiRetensistent with Rule 

4L(e^2)(S)j:t!)e,wafrantvi£iir0appl>ingifor£vy?ilJd4MgnflcseizitigJ®agBigTidfothetwiisg<|:ppj:tagging, or otherwise 
stocagegBediadhat reasonabfysiqipieabtic^cca^fjBsemccDrcallnfldkbecsidfiecejdcscitbedfntbte evidence described 
wafmati,tanckw®ul£i>aatbo*ij:ieiaDteierd'eMi0yMi0f ihermeeba;or infcraa*i®0 icons ist^sMbhdbe on consistent with the 
warrant tTherlateriratiew maytequirifetfchrajquct^indadjlrigJbiiflieot IiOMteddel Co® pta tcr-assisied i m i t e d to comput< 
©MkcdBffldiiiirffl.itefiJjMgbt ®?*paseimfflpiiytpMtsprfsdiatidid^vpd©bamafl iasptstiQndnrive to human insj 
oiida«todeteaBtmiMvJictbcMtfefeddenifle diesciabedibyitte wanradibed by the warrant. 

eQMCfclASION 

21 .. tsubittbihatdhkaffidaMitMpp(^vpiiDbahfep!mose f^mba/aeraet tsfesisiechfthe a warrant to search 
PR®VHS£,S.ilh© VigMiCldJ, andithOiREi^DNidescribc^ miiAlhiciMitaiiliAGaiid seize dhe items the items 
described! iniAMachrneattBB. 
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HjRt&KAUNG 


28 .. Bl |s tcspe^l%J^cBS|in£aiyd itei^iiystfeiiirttesiiic aDMalcCSfatJbigiBBtdfefiaiihCDBtitet sealing, until 
otfT llitrta.*iffb uilltp apeIsLs l jteapi Hrd i m utejn]i:trt«afitliinapqdppbrrt. iofIvttl hfelhaptpjt>Biefi tojnoaiyi including the appl: 
SiaHdthawaBti:ahte.dicl , el±bulli©sryig:ri'a.tcl0iaHil(iiJigs t)tidiss®t®clTsan®jnte: tin© iliisvseifidary because the items ai 
Mdraritibtiiiohc fed/dafeursedle'enii tar<ffi QJKbetteintcstiigaiam iihvieaiii^kteiiti&ecknd the l-'UI h 

alljt>otptmdittia Bila 1 cttaMniaiLcscwnfos&tsdat!®siiteocK.* ibisitohte'disafflicstjuittHamd&cihdli&t ed to its inves 
diifiyibliUiJdlibfOElliietScftiHbbrflti'gdffiVflt may have a signifi< 

nuagihte d tre paiohpa tite cam l i ti hie g cramf ti galrbn gi nd itirve sb i^a b ij crop; fflutiidc it a y fl isi± we itresl ^jcopardi/e its ef 
alldvs inmg-iinmMp ttiilii s p a s>ppe d u aitv ' tipflot tiknti'eyc t id c fiOjete/o rd4 s'tbjttiyn&vtildswde (stored electronic< 
otltoevris&itedi^nj&hpHJ^'iipatbdlittfi'rQfiiObsfo&lyiiaHpiraldoiiilpdiiffiy.acriminal confederates. 


Re^petdjtl&uiiliyi i Boxbmi t ted. 



Sped Alai repent 

tr(.'tkdHrtlG.rc3uii!j£4iayidjl ipdii (invest igat ion 


Sitkhsiiiibed anal swam le before ihs 
OKI -Ittlftie 3s2(J bl.7; 
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